Smart Insights feature guide

Smart Insights Overview

Smart Insights is an AI-powered analysis feature that provides a second opinion on email security threats. When you review suspicious emails in your Inky dashboard, Smart Insights uses a large language model (LLM) to deliver deeper, contextual analysis, including risk assessment, trickiness rating, and detailed explanations, to help you make more informed security decisions.

Smart Insights is enabled by default. The setting is a per-team opt-out, giving administrators the ability to prevent a specific team's email from being submitted to the LLM if required by internal policy or compliance requirements.

Data handling

• Submitted content stays within INKY infrastructure.

• Message content is not used to train INKY or any third-party systems.

• Disabling Smart Insights for a team ensures that team's mail is never sent to the LLM at any phase of analysis.

Key benefits

• Deeper understanding: Goes beyond pattern matching by evaluating the email’s context, intent, and meaning.

• Natural language explanations: Provides clear, human-readable insights about why an email may be risky.

• Contextual analysis: Considers the complete picture, including sender reputation, message content, intent, and technical indicators.

• Risk indicators: Identifies suspicious elements like urgency tactics, unusual requests, or hidden content.

How Smart Insights works

To access Smart Insights, select Analysis > Observations and open any inbound message. A Smart Insights button (dark blue-to-fuchsia gradient with sparkle icon) appears in the action bar. Click it to open the Smart Insights panel for that message.

When Smart Insights analyzes your email, the panel may display relevant elements such as:

• Risk Assessment: Verdict on email safety (Likely Legitimate, Suspicious, or Likely Malicious).

• Trickiness Rating: How sophisticated the attack attempt appears (ranges vary per email, such as Low, Medium, Low-Medium, Medium-High, or High).

• Explanation: AI-generated narrative explaining why the email received that verdict.

• Risk Indicators: Specific suspicious elements detected (for example, newly registered domain, hidden text, phishing content).

• Supporting Signals: Technical lower-level details and heuristics that fired during analysis.

• Authentication: Email authentication results (Aligned or detailed status).

• Actions: Find Similar (identifies related messages with matching characteristics) and Allow/Block List options (add sender to allow or block list).

Likely Legitimate example

Likely Malicious example

When to use Smart Insights

Smart Insights is most valuable when:

• You're investigating an email that seems slightly off but you're not completely sure.

• You received a message from an unfamiliar sender that appears legitimate but requests action.

• An email passed INKY’s initial checks, but you want additional confidence before trusting it.

• You need to explain to users why a message was flagged as suspicious.

Important Notes

• Smart Insights is AI-generated and may occasionally make mistakes. It should be used as a supplementary analysis tool alongside your security team's judgment.

• This feature uses advanced AI to analyze message content. The feature can be enabled or disabled per organization through your admin settings.

• Smart Insights may not be available for old unreported emails.

Enabling or Disabling Smart Insights for a team

Smart Insights is enabled by default for your organization. To change this setting:

1. On the top navigation bar, select Settings > Admin Center > Analysis > Smart Insights.

2. Clear the Enable Smart Insights for this team check box to disable the feature.

When Smart Insights is disabled: INKY's standard threat detection continues normally for that team's inbound email. Phishing detection, spoofing checks, banner insertion, and all other INKY features operate as usual. Disabling Smart Insights removes the LLM-powered analysis layer, which provides additional signal and richer explanations of threats. The Smart Insights button on the Observations page will appear grayed out for this team's messages. Disabling affects analysis depth but does not affect INKY's email protection.

When Smart Insights is enabled: Smart Insights uses a LLM to provide deeper analysis. When enabled, message content from this team will be submitted to the LLM for evaluation. Submitted content stays within INKY infrastructure and is not used to train INKY or third-party systems. Disable to keep this team's mail from being sent to the LLM at any phase of analysis.

Inheritance

Smart Insights settings follow INKY's standard policy inheritance. If disabled at an organization level, child teams inherit the opt-out unless overridden at the team level.